$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft File: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft (raw, json) Hash identifier: iKyINND3/PuiJs2zdCSj8jmPkQHa0XD6pALftTJaXdY= Subject key identifier: 99:DD:56:0B:C7:F4:57:1E:2E:98:B2:A8:8B:27:73:F0:CE:11:E3:6D Authority key identifier: B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A Certificate issuer: /CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Certificate serial: 4C100038E50D871C12DE65F0E5F2D754A69CAFFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 22:24:10 +0000 Manifest this update: Tue 22 Sep 2026 22:19:10 +0000 Manifest next update: Thu 24 Sep 2026 01:25:10 +0000 Files and hashes: 1: B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl (hash: Hzm2gTFiKYg7DcdVl6B4WoCGFDYpwGDWckrBSWza1j4=) 2: 3136302e32352e3232392e302f32342d3234203d3e20313533313036.roa (hash: fDnmzf65jBSv74PMDMyNjaHpX/nCsTXRpP2C1qWxmnk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 01:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:10:00:38:e5:0d:87:1c:12:de:65:f0:e5:f2:d7:54:a6:9c:af:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A Validity Not Before: Sep 22 22:19:10 2026 GMT Not After : Sep 24 01:25:10 2026 GMT Subject: CN=99DD560BC7F4571E2E98B2A88B2773F0CE11E36D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:87:11:03:96:b7:8e:5e:96:b4:1c:ec:b0: 77:e7:cc:2e:9f:59:00:89:5c:a8:53:4b:f0:86:e7: 26:fe:91:a9:1b:4f:5b:c5:1b:cf:35:f4:be:a3:f2: 9b:a0:e2:16:63:a2:20:f3:56:17:ed:a8:08:82:d5: 8f:a7:7c:c6:bc:90:8d:40:cf:69:0e:8f:dc:8d:da: a2:ef:e8:d5:3b:39:f8:68:45:fd:5f:fe:4e:64:a0: 7d:bc:ec:52:1b:30:25:2d:de:50:96:88:49:8e:d0: d9:2e:ba:9b:35:2c:0d:fc:ad:a4:be:11:5d:03:70: a2:86:cc:37:03:50:55:3a:8d:99:a3:f2:23:fc:2a: 32:f5:05:c0:e7:d4:53:df:90:74:8d:a0:76:35:42: 3d:e6:59:bf:51:e1:f8:be:bd:11:94:a7:6d:b4:c8: 3c:42:4f:28:ed:b4:fd:46:80:df:be:cb:d3:9e:f3: 2c:64:93:11:ed:c6:6e:5c:f5:83:15:f3:9e:9e:0d: 9f:e8:c5:24:5d:f5:a8:06:0b:f6:7b:4d:6e:66:e8: 0e:bc:f1:ac:50:e5:be:86:fa:23:c0:9a:e7:97:2e: c9:04:fb:be:f9:ec:5d:85:fb:17:c5:4c:69:57:0d: b1:fc:0b:04:68:75:95:f3:13:24:60:65:d0:4c:98: 22:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DD:56:0B:C7:F4:57:1E:2E:98:B2:A8:8B:27:73:F0:CE:11:E3:6D X509v3 Authority Key Identifier: keyid:B9:B8:A6:1D:8E:A5:52:0C:F2:8E:8E:5C:24:50:17:6A:C5:FA:D2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aa417608-16b8-4497-81e3-947d78dbcf11/0/B9B8A61D8EA5520CF28E8E5C2450176AC5FAD29A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c0:1f:5e:16:ab:42:c5:b4:04:57:e6:4c:b3:6f:23:ed:bb: e3:79:b7:e6:cd:25:69:4c:15:42:86:e8:d2:0e:75:dd:c5:c1: 3f:6a:22:1f:70:1a:93:11:1c:e1:fb:10:32:8d:3e:78:68:7d: fb:68:6c:a5:95:22:66:c1:dc:d6:4b:16:fe:ed:5e:4c:49:6d: 76:d2:78:b5:b9:d3:5a:5f:6c:80:c2:55:49:68:3d:69:49:5c: 02:6f:61:1b:4b:35:f6:75:03:31:42:99:56:12:ef:79:02:2a: da:25:66:f4:55:ed:d7:7c:ad:0e:5b:7f:b3:20:fc:c6:62:d2: dd:c9:37:7f:76:8e:01:76:2d:7b:d9:0b:5b:71:bd:e5:e8:54: 30:22:35:1b:30:f0:4e:dd:8a:45:2b:82:38:d0:6e:ca:40:43: 1d:79:f9:c4:5f:50:ae:af:2a:ec:35:08:52:f3:51:9d:fc:ec: 83:a5:b5:c8:8f:cb:d7:8c:5e:b5:2d:90:c8:dc:08:61:7b:ae: 46:ea:3d:56:84:f4:20:8c:50:d3:53:3c:bc:28:ce:3f:a5:88: 26:21:ff:c7:35:97:0b:7c:d7:6e:79:96:20:a7:00:d6:93:9d: 79:7e:cd:85:5a:f2:9a:2f:1d:9a:89:00:dc:9e:5f:3d:d1:5d: b5:e4:77:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBAAOOUNhxwS3mXw5fLXVKacr/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFD NUZBRDI5QTAeFw0yNjA5MjIyMjE5MTBaFw0yNjA5MjQwMTI1MTBaMDMxMTAvBgNV BAMTKDk5REQ1NjBCQzdGNDU3MUUyRTk4QjJBODhCMjc3M0YwQ0UxMUUzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC664cRA5a3jl6WtBzssHfnzC6f WQCJXKhTS/CG5yb+kakbT1vFG8819L6j8pug4hZjoiDzVhftqAiC1Y+nfMa8kI1A z2kOj9yN2qLv6NU7OfhoRf1f/k5koH287FIbMCUt3lCWiEmO0Nkuups1LA38raS+ EV0DcKKGzDcDUFU6jZmj8iP8KjL1BcDn1FPfkHSNoHY1Qj3mWb9R4fi+vRGUp220 yDxCTyjttP1GgN++y9Oe8yxkkxHtxm5c9YMV856eDZ/oxSRd9agGC/Z7TW5m6A68 8axQ5b6G+iPAmueXLskE+7757F2F+xfFTGlXDbH8CwRodZXzEyRgZdBMmCKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmd1WC8f0Vx4umLKoiydz8M4R420wHwYDVR0j BBgwFoAUubimHY6lUgzyjo5cJFAXasX60powDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWE0MTc2MDgtMTZiOC00NDk3LTgxZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4 RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3NkFDNUZBRDI5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9COUI4QTYxRDhFQTU1MjBDRjI4RThFNUMyNDUwMTc2QUM1RkFE MjlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWE0MTc2MDgtMTZiOC00NDk3LTgx ZTMtOTQ3ZDc4ZGJjZjExLzAvQjlCOEE2MUQ4RUE1NTIwQ0YyOEU4RTVDMjQ1MDE3 NkFDNUZBRDI5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7AH14Wq0LFtARX5kyzbyPtu+N5t+bNJWlM FUKG6NIOdd3FwT9qIh9wGpMRHOH7EDKNPnhofftobKWVImbB3NZLFv7tXkxJbXbS eLW501pfbIDCVUloPWlJXAJvYRtLNfZ1AzFCmVYS73kCKtolZvRV7dd8rQ5bf7Mg /MZi0t3JN392jgF2LXvZC1txveXoVDAiNRsw8E7dikUrgjjQbspAQx15+cRfUK6v Kuw1CFLzUZ387IOltciPy9eMXrUtkMjcCGF7rkbqPVaE9CCMUNNTPLwozj+liCYh /8c1lwt81255liCnANaTnXl+zYVa8povHZqJANyeXz3RXbXkdxo= -----END CERTIFICATE-----Generated at Wed Sep 23 14:34:32 2026 by rpki-client